Foxitsoftware

Records797All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical44CVSS 9.0–10.0

CVSS high620CVSS 7.0–8.9

Exploited now

Foxitsoftware records in CISA KEV

No Foxitsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phantompdf 549 records HIGH Foxit Reader 372 records HIGH Reader 259 records HIGH Foxit Studio Photo 54 records MEDIUM Pdf Editor 28 records HIGH 3d 20 records MEDIUM Foxit Pdf Sdk Activex 10 records MEDIUM U3d 9 records MEDIUM

Records

549 records in Phantompdf · all components

TI-2018-07063 CVE-2018-9958 · GHSA-6v4r-gv8g-8w3c

Use after free in Foxit Reader

HIGH 73

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.61707 Published 2018-05-17 No fix listed CWE-416

TI-2018-02892 CVE-2018-3924 · GHSA-gqjx-6w9v-wr78

Use after free in Foxit

HIGH 67

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.5096.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.43715 Published 2018-08-01 No fix listed CWE-416

TI-2018-07053 CVE-2018-9948 · GHSA-589f-765p-q2h4

Information disclosure in Foxit Reader

MEDIUM 64

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.62491 Published 2018-05-17 No fix listed CWE-824

TI-2018-02924 CVE-2018-3956 · GHSA-php8-5jrg-x8g2

Out-of-bounds read in Foxit

MEDIUM 61

An exploitable out-of-bounds read vulnerability exists in the handling of certain XFA element attributes of Foxit Software's PDF Reader version 9.1.0.5096.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.46008 Published 2019-01-30 No fix listed CWE-125

TI-2020-07098 CVE-2020-8844 · GHSA-7554-j89c-fh4v

Integer overflow in Foxit Reader

MEDIUM 55

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.23664 Published 2020-02-13 No fix listed CWE-190

TI-2020-07110 CVE-2020-8856 · GHSA-m87p-28g3-v6m6

Use after free in Foxit PhantomPDF

MEDIUM 53

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.19837 Published 2020-02-13 No fix listed CWE-416

TI-2020-07100 CVE-2020-8846 · GHSA-9h36-xfgg-w797

Use after free in Foxit PhantomPDF

MEDIUM 53

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.19837 Published 2020-02-13 No fix listed CWE-416

TI-2020-07099 CVE-2020-8845 · GHSA-m7q6-6cr7-23gp

Use after free in Foxit PhantomPDF

MEDIUM 52

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.19457 Published 2020-02-13 No fix listed CWE-416

TI-2018-12618 CVE-2018-17686 · GHSA-749w-rw5m-c3mg

Out-of-bounds read in Foxit Reader

MEDIUM 50

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.2.0.9297.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.24397 Published 2019-01-24 No fix listed CWE-125

TI-2018-10355 CVE-2018-14442 · GHSA-fc35-gmq9-qpqf

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to…

MEDIUM 50

Foxit Reader before 9.2 and PhantomPDF before 9.2 have a Use-After-Free that leads to Remote Code Execution, aka V-88f4smlocs.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04778 Published 2018-07-20 No fix listed CWE-416

TI-2018-10243 CVE-2018-14295 · GHSA-jgvf-rg2h-x75x

Integer overflow in Foxit PhantomPDF

MEDIUM 49

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.08784 Published 2018-07-31 No fix listed CWE-190

TI-2018-12543 CVE-2018-17611 · GHSA-h4wf-f2pr-8r6w

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code…

MEDIUM 48

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled.